How to Find Out If Your Information Was in the Capital One Data Breach

How to check if you were affected

Capital One confirmed in July 2019 that a data breach exposed personal information of approximately 106 million people in the United States and Canada. The breach included names, Social Security numbers, bank account numbers, credit card account numbers, and credit limits for customers and people who had applied for credit.

To find out whether your information was part of this breach, you can visit the dedicated website Capital One set up: capitalonesettlement.com. The site has a tool where you enter your name and date of birth to see if your data was exposed. You do not need to provide a Social Security number or financial account number to check.

If the tool shows your information was affected, Capital One is offering free credit monitoring and identity theft protection services for six years from the date of the breach. The company also established a settlement fund to compensate people harmed by the breach, though the amount varies depending on what information was exposed and what steps you took afterward.

Key Takeaways

• Visit capitalonesettlement.com and enter your name and date of birth to check if your information was in the 2019 Capital One data breach.
• The breach exposed names, Social Security numbers, bank account numbers, and credit card information for approximately 106 million people.
• If you were affected, Capital One offers six years of free credit monitoring and identity theft protection services.
• A settlement fund exists to compensate people harmed by the breach, and you may be able to claim money depending on your circumstances.
• You should monitor your credit reports and financial accounts even if the tool says you were not affected, since data breaches sometimes affect people in ways not when ready known.

What information was exposed in the breach

The data exposed varied depending on the type of account or process. For credit card customers, the breach included names, contact information, Social Security numbers, account numbers, credit limits, and credit balances. For people who had applied for credit but were not yet customers, the breach included names, dates of birth, Social Security numbers, mailing addresses, and email addresses.

The breach did not expose credit card PIN numbers, credit card expiration dates, or CVV security codes. It also did not expose login credentials or passwords. However, the combination of information that was exposed — particularly Social Security numbers paired with account numbers — is enough for someone to attempt identity theft or fraudulent account access.

What Capital One is offering to affected people

Capital One set up a settlement to address the harm caused by the breach. The settlement includes free credit monitoring and identity theft protection services for six years. These services are available to anyone whose information was exposed, regardless of whether they were a Capital One customer at the time of the breach.

The settlement also includes cash compensation. The amount you may receive depends on several factors: whether you were a Capital One customer, whether your information was actually misused after the breach, and how much time and money you spent responding to potential fraud or identity theft. People who experienced actual fraud or identity theft may receive more than people whose information was exposed but not misused.

To receive settlement money, you typically need to submit a claim form with documentation of any harm you suffered. The settlement website provides instructions on how to file a claim and what documents to submit as proof.

Steps to take if your information was exposed

If the tool at capitalonesettlement.com shows your information was affected, start by enrolling in the free credit monitoring and identity theft protection services Capital One is offering. You will receive instructions on how to enroll when you check your status on the settlement website.

Next, obtain copies of your credit reports from all three credit bureaus — Equifax, Experian, and TransUnion. You can request free reports at annualcreditreport.com, which is the official site run by the three bureaus. Review the reports carefully for accounts you do not recognize or inquiries you did not authorize.

Consider placing a fraud alert or credit freeze on your credit file. A fraud alert tells lenders to take extra steps to verify your identity before opening new accounts in your name. A credit freeze prevents lenders from accessing your credit report entirely unless you temporarily lift it. Both are free and can be done by contacting any of the three credit bureaus.

Monitor your bank and credit card accounts regularly for unauthorized transactions. If you spot fraud, contact your bank or card issuer when ready and report it. Keep records of all communications and documentation related to any fraudulent activity, as you may need this for a settlement claim.

How the settlement claim process works

Capital One set a important date for submitting settlement claims. If you missed the original important date, you may still be able to file a late claim in some cases, though the process and compensation may differ. Check the settlement website for current important date and instructions.

To file a claim, you typically need to provide your name, contact information, and proof that you were affected by the breach. If you are claiming compensation for actual fraud or identity theft, you will need to submit documentation such as police reports, credit bureau dispute letters, bank statements showing fraudulent charges, or receipts for money you spent addressing the fraud.

The settlement administrator reviews claims and determines the amount of compensation based on the type and severity of harm. Payments are usually made by check or direct deposit. The timeline for processing claims varies, but you should expect several months from submission to payment.

What to do if you were not affected by the breach

If the tool shows your information was not in the breach, you still benefit from understanding what happened and taking steps to protect yourself going forward. Data breaches are common, and your information may be exposed in other breaches even if it was not in this one.

Consider enrolling in credit monitoring services through your bank, credit card issuer, or a third-party provider. Many banks and card issuers offer free credit monitoring to their customers. You can also check your credit reports annually at annualcreditreport.com to catch unauthorized accounts or inquiries.

Use strong, unique passwords for each of your financial accounts and email accounts. Enable two-factor authentication wherever it is offered. These steps make it harder for someone to access your accounts even if they have your account number or other personal information.

Understanding the settlement timeline and your rights

Capital One agreed to pay up to $700 million to settle claims related to the breach. This money is divided among people whose information was exposed, with the amount depending on the type of harm they experienced. The settlement also requires Capital One to invest in security improvements and to notify people of data breaches more quickly in the future.

The settlement is not an admission of wrongdoing by Capital One, but rather a resolution of the legal claims brought against the company. If you have questions about your rights under the settlement or whether you are may have access to to compensation, the settlement website provides detailed information and contact details for the settlement administrator.

Frequently Asked Questions

Do I have to pay anything to check if I was affected or to get the free credit monitoring?

No. Checking your status on capitalonesettlement.com is free, and the credit monitoring and identity theft protection services are free for six years. Capital One is paying for these services as part of the settlement. Be cautious of third-party websites claiming to help you check your status or enroll in services — they may charge fees or collect unnecessary personal information.

What if I find fraudulent accounts or charges after the settlement important date has passed?

Contact Capital One and your bank or credit card issuer when ready to report the fraud. You may still be able to file a late claim with the settlement administrator if you can show that the fraud occurred as a result of the breach. Document everything and contact the settlement administrator to ask about your options.

Can I sue Capital One separately if I was affected by the breach?

The settlement resolves most claims related to the breach, which means you generally cannot sue Capital One separately for the same harm. However, if you believe you have a claim that is not covered by the settlement, you may want to consult with an attorney to understand your options.

How long will the free credit monitoring last?

Capital One is providing free credit monitoring and identity theft protection services for six years from the date of the breach. After six years, the services will end unless Capital One extends them. You can continue to monitor your credit on your own by checking your reports annually at annualcreditreport.com.

What if I never had a Capital One account but my information was exposed?

If your information was exposed because you applied for a Capital One credit card or loan but were not approved, you are still covered by the settlement. You can check your status and enroll in the free credit monitoring services the same way as customers. You may also be able to file a claim for compensation if you experienced fraud or identity theft.